cobaltstrike | 4f8830dd18dd4c4414a876206b03d02b244a9b62caeb9f7642bd78affa438130 | Triage

Analysis

max time kernel
132s
max time network
141s
platform
windows7_x64
resource
win7-en-20211208
submitted
05-01-2022 14:42

Sharing

Report Analysis Logs

General

Target

4f8830dd18dd4c4414a876206b03d02b244a9b62caeb9f7642bd78affa438130.exe
Size

2.0MB
MD5

9e7c0c655b630e782d3843d5f9a8e001
SHA1

e3d8f1dc91ca72246f1ca8ca1b5fd9fc362636d6
SHA256

4f8830dd18dd4c4414a876206b03d02b244a9b62caeb9f7642bd78affa438130
SHA512

8b45a3040b0b0c7a826069a56acbe22de12b552882416938796c912aad7ffc49795ffc68b42f4cda292f18a3ff4f35af36c823bd27798629ec893bbfd6d840a8

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.93.63.179:5812/TOmM

Attributes

user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; UHS)

Signatures

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\4f8830dd18dd4c4414a876206b03d02b244a9b62caeb9f7642bd78affa438130.exe
"C:\Users\Admin\AppData\Local\Temp\4f8830dd18dd4c4414a876206b03d02b244a9b62caeb9f7642bd78affa438130.exe"
1⤵
PID:1128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1128-54-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download